[FW-1] FW1 service being dropped

["Steck, Steffen M." <Steffen.Steck@FW1-NOSPAMFRIATEC.DE>]

Hi,
a question to the rulebase in an HA environment (HA with machines 1 and 2,
separate mgmt, 4.1 SP5) today.
At a customer I have a stealth rule somewhere on the top of the rulebase.
Now I see periodically entries in the log like this (nearly each second):
Origin machine1 external if source machine1 internal if dest machine2
internal if service FW1
and the same exactly vice versa:
machine2 ext. machine2 int. machine1 int Fw1
being dropped by the stealth rule.
What is happening here?
Anyhow, even if I put a rule in place to allow just this before the stealth,
the packets are being dropped also.
Any idea?
THX
Steffen

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================